From ffa32eba750a6d52e4896c0dce0384de37c10c0a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 23 Sep 2025 12:01:43 +0000 Subject: [PATCH 1/2] chore: bump starlette from 0.46.2 to 0.47.2 in /services/rag-backend Bumps [starlette](https://github.com/Kludex/starlette) from 0.46.2 to 0.47.2. - [Release notes](https://github.com/Kludex/starlette/releases) - [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md) - [Commits](https://github.com/Kludex/starlette/compare/0.46.2...0.47.2) --- updated-dependencies: - dependency-name: starlette dependency-version: 0.47.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] --- services/rag-backend/poetry.lock | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/services/rag-backend/poetry.lock b/services/rag-backend/poetry.lock index 64a441bd..10563590 100644 --- a/services/rag-backend/poetry.lock +++ b/services/rag-backend/poetry.lock @@ -1,4 +1,4 @@ -# This file is automatically @generated by Poetry 2.1.3 and should not be changed by hand. +# This file is automatically @generated by Poetry 2.2.0 and should not be changed by hand. [[package]] name = "aiohappyeyeballs" @@ -4667,14 +4667,14 @@ sqlcipher = ["sqlcipher3_binary"] [[package]] name = "starlette" -version = "0.46.2" +version = "0.47.2" description = "The little ASGI library that shines." optional = false python-versions = ">=3.9" groups = ["main"] files = [ - {file = "starlette-0.46.2-py3-none-any.whl", hash = "sha256:595633ce89f8ffa71a015caed34a5b2dc1c0cdb3f0f1fbd1e69339cf2abeec35"}, - {file = "starlette-0.46.2.tar.gz", hash = "sha256:7f7361f34eed179294600af672f565727419830b54b7b084efe44bb82d2fccd5"}, + {file = "starlette-0.47.2-py3-none-any.whl", hash = "sha256:c5847e96134e5c5371ee9fac6fdf1a67336d5815e09eb2a01fdb57a351ef915b"}, + {file = "starlette-0.47.2.tar.gz", hash = "sha256:6ae9aa5db235e4846decc1e7b79c4f346adf41e9777aebeb49dfd09bbd7023d8"}, ] [package.dependencies] From 99932d8d0b92dd2d4622fb7747e43f73154f08a8 Mon Sep 17 00:00:00 2001 From: Andreas Klos Date: Wed, 24 Sep 2025 10:38:40 +0200 Subject: [PATCH 2/2] chore: update starlette version to 0.47.3 and add version constraints across multiple libraries --- libs/admin-api-lib/poetry.lock | 8 ++++---- libs/admin-api-lib/pyproject.toml | 1 + libs/extractor-api-lib/poetry.lock | 8 ++++---- libs/extractor-api-lib/pyproject.toml | 1 + libs/rag-core-api/poetry.lock | 8 ++++---- libs/rag-core-api/pyproject.toml | 1 + services/admin-backend/poetry.lock | 7 ++++--- services/document-extractor/poetry.lock | 1 + services/mcp-server/poetry.lock | 9 +++++---- services/mcp-server/pyproject.toml | 1 + services/rag-backend/poetry.lock | 5 +++-- 11 files changed, 29 insertions(+), 21 deletions(-) diff --git a/libs/admin-api-lib/poetry.lock b/libs/admin-api-lib/poetry.lock index 5c7082e5..df0452f5 100644 --- a/libs/admin-api-lib/poetry.lock +++ b/libs/admin-api-lib/poetry.lock @@ -3550,14 +3550,14 @@ sqlcipher = ["sqlcipher3_binary"] [[package]] name = "starlette" -version = "0.46.2" +version = "0.47.3" description = "The little ASGI library that shines." optional = false python-versions = ">=3.9" groups = ["main"] files = [ - {file = "starlette-0.46.2-py3-none-any.whl", hash = "sha256:595633ce89f8ffa71a015caed34a5b2dc1c0cdb3f0f1fbd1e69339cf2abeec35"}, - {file = "starlette-0.46.2.tar.gz", hash = "sha256:7f7361f34eed179294600af672f565727419830b54b7b084efe44bb82d2fccd5"}, + {file = "starlette-0.47.3-py3-none-any.whl", hash = "sha256:89c0778ca62a76b826101e7c709e70680a1699ca7da6b44d38eb0a7e61fe4b51"}, + {file = "starlette-0.47.3.tar.gz", hash = "sha256:6bc94f839cc176c4858894f1f8908f0ab79dfec1a6b8402f6da9be26ebea52e9"}, ] [package.dependencies] @@ -4142,4 +4142,4 @@ cffi = ["cffi (>=1.11)"] [metadata] lock-version = "2.1" python-versions = "^3.13" -content-hash = "567b2368fd8d8c5e6905c764d92fcb3ae95ea0f404682a26e868ad854934b323" +content-hash = "9ca13bfcf48c458708b8d371e10fbad5788864b1a0fe98c75f828fd7a902c9d8" diff --git a/libs/admin-api-lib/pyproject.toml b/libs/admin-api-lib/pyproject.toml index ad42905e..adf0d39a 100644 --- a/libs/admin-api-lib/pyproject.toml +++ b/libs/admin-api-lib/pyproject.toml @@ -108,6 +108,7 @@ langfuse = "3.2.1" redis = "^6.0.0" pyyaml = "^6.0.2" python-multipart = "^0.0.20" +starlette = ">=0.47.2,<0.49.0" [tool.pytest.ini_options] log_cli = 1 diff --git a/libs/extractor-api-lib/poetry.lock b/libs/extractor-api-lib/poetry.lock index 747a1764..01bc4441 100644 --- a/libs/extractor-api-lib/poetry.lock +++ b/libs/extractor-api-lib/poetry.lock @@ -4253,14 +4253,14 @@ sqlcipher = ["sqlcipher3_binary"] [[package]] name = "starlette" -version = "0.46.2" +version = "0.47.3" description = "The little ASGI library that shines." optional = false python-versions = ">=3.9" groups = ["main"] files = [ - {file = "starlette-0.46.2-py3-none-any.whl", hash = "sha256:595633ce89f8ffa71a015caed34a5b2dc1c0cdb3f0f1fbd1e69339cf2abeec35"}, - {file = "starlette-0.46.2.tar.gz", hash = "sha256:7f7361f34eed179294600af672f565727419830b54b7b084efe44bb82d2fccd5"}, + {file = "starlette-0.47.3-py3-none-any.whl", hash = "sha256:89c0778ca62a76b826101e7c709e70680a1699ca7da6b44d38eb0a7e61fe4b51"}, + {file = "starlette-0.47.3.tar.gz", hash = "sha256:6bc94f839cc176c4858894f1f8908f0ab79dfec1a6b8402f6da9be26ebea52e9"}, ] [package.dependencies] @@ -5004,4 +5004,4 @@ cffi = ["cffi (>=1.11)"] [metadata] lock-version = "2.1" python-versions = "^3.13" -content-hash = "a71bf11096e689214da0095d3c91e34bf295d2e8b1cd528a436391661cfaa396" +content-hash = "af0f58c4a9fb91f30eaf3aa899d82fdce2b78c21e1c4099f1b0be81849932fc3" diff --git a/libs/extractor-api-lib/pyproject.toml b/libs/extractor-api-lib/pyproject.toml index 87b334f5..e676d52c 100644 --- a/libs/extractor-api-lib/pyproject.toml +++ b/libs/extractor-api-lib/pyproject.toml @@ -102,6 +102,7 @@ camelot-py = {extras = ["cv"], version = "^1.0.0"} fake-useragent = "^2.2.0" pypdfium2 = "4.30.0" pypandoc-binary = "^1.15" +starlette = ">=0.47.2,<0.49.0" [tool.poetry.group.dev.dependencies] pytest = "^8.3.5" diff --git a/libs/rag-core-api/poetry.lock b/libs/rag-core-api/poetry.lock index c35a382e..afc577d1 100644 --- a/libs/rag-core-api/poetry.lock +++ b/libs/rag-core-api/poetry.lock @@ -4630,14 +4630,14 @@ sqlcipher = ["sqlcipher3_binary"] [[package]] name = "starlette" -version = "0.46.2" +version = "0.47.3" description = "The little ASGI library that shines." optional = false python-versions = ">=3.9" groups = ["main"] files = [ - {file = "starlette-0.46.2-py3-none-any.whl", hash = "sha256:595633ce89f8ffa71a015caed34a5b2dc1c0cdb3f0f1fbd1e69339cf2abeec35"}, - {file = "starlette-0.46.2.tar.gz", hash = "sha256:7f7361f34eed179294600af672f565727419830b54b7b084efe44bb82d2fccd5"}, + {file = "starlette-0.47.3-py3-none-any.whl", hash = "sha256:89c0778ca62a76b826101e7c709e70680a1699ca7da6b44d38eb0a7e61fe4b51"}, + {file = "starlette-0.47.3.tar.gz", hash = "sha256:6bc94f839cc176c4858894f1f8908f0ab79dfec1a6b8402f6da9be26ebea52e9"}, ] [package.dependencies] @@ -5401,4 +5401,4 @@ cffi = ["cffi (>=1.11)"] [metadata] lock-version = "2.1" python-versions = "^3.13" -content-hash = "45f8fec18cfbc7ca45912290de3d0353093811274e7b7adca3c9e7e8fa8a638e" +content-hash = "d81518c37410f7ad91ddb02405bf37ce67a699c2ae100e352f0792f26ab551ea" diff --git a/libs/rag-core-api/pyproject.toml b/libs/rag-core-api/pyproject.toml index 4f897683..05d531c6 100644 --- a/libs/rag-core-api/pyproject.toml +++ b/libs/rag-core-api/pyproject.toml @@ -32,6 +32,7 @@ langchain-community = "0.3.27" fastembed = "^0.7.0" langdetect = "^1.0.9" langfuse = "3.2.1" +starlette = ">=0.47.2,<0.49.0" [tool.poetry.group.dev.dependencies] diff --git a/services/admin-backend/poetry.lock b/services/admin-backend/poetry.lock index b7cae939..4d688129 100644 --- a/services/admin-backend/poetry.lock +++ b/services/admin-backend/poetry.lock @@ -20,6 +20,7 @@ python-multipart = "^0.0.20" pyyaml = "^6.0.2" rag-core-lib = {path = "../rag-core-lib"} redis = "^6.0.0" +starlette = ">=0.47.2,<0.49.0" tenacity = "9.1.2" tqdm = "^4.67.1" uvicorn = "^0.35.0" @@ -3559,14 +3560,14 @@ sqlcipher = ["sqlcipher3_binary"] [[package]] name = "starlette" -version = "0.46.2" +version = "0.47.3" description = "The little ASGI library that shines." optional = false python-versions = ">=3.9" groups = ["main"] files = [ - {file = "starlette-0.46.2-py3-none-any.whl", hash = "sha256:595633ce89f8ffa71a015caed34a5b2dc1c0cdb3f0f1fbd1e69339cf2abeec35"}, - {file = "starlette-0.46.2.tar.gz", hash = "sha256:7f7361f34eed179294600af672f565727419830b54b7b084efe44bb82d2fccd5"}, + {file = "starlette-0.47.3-py3-none-any.whl", hash = "sha256:89c0778ca62a76b826101e7c709e70680a1699ca7da6b44d38eb0a7e61fe4b51"}, + {file = "starlette-0.47.3.tar.gz", hash = "sha256:6bc94f839cc176c4858894f1f8908f0ab79dfec1a6b8402f6da9be26ebea52e9"}, ] [package.dependencies] diff --git a/services/document-extractor/poetry.lock b/services/document-extractor/poetry.lock index 4f3d9adf..ae940e04 100644 --- a/services/document-extractor/poetry.lock +++ b/services/document-extractor/poetry.lock @@ -1126,6 +1126,7 @@ pytesseract = "^0.3.10" python-multipart = "^0.0.20" pyyaml = "^6.0.2" requests-oauthlib = "^2.0.0" +starlette = ">=0.47.2,<0.49.0" tabulate = "^0.9.0" unstructured = {version = "0.18.13", extras = ["docx", "pptx"]} uvicorn = "^0.35.0" diff --git a/services/mcp-server/poetry.lock b/services/mcp-server/poetry.lock index f2f8551a..01604e89 100644 --- a/services/mcp-server/poetry.lock +++ b/services/mcp-server/poetry.lock @@ -3069,18 +3069,19 @@ uvicorn = ["uvicorn (>=0.34.0)"] [[package]] name = "starlette" -version = "0.46.2" +version = "0.48.0" description = "The little ASGI library that shines." optional = false python-versions = ">=3.9" groups = ["main"] files = [ - {file = "starlette-0.46.2-py3-none-any.whl", hash = "sha256:595633ce89f8ffa71a015caed34a5b2dc1c0cdb3f0f1fbd1e69339cf2abeec35"}, - {file = "starlette-0.46.2.tar.gz", hash = "sha256:7f7361f34eed179294600af672f565727419830b54b7b084efe44bb82d2fccd5"}, + {file = "starlette-0.48.0-py3-none-any.whl", hash = "sha256:0764ca97b097582558ecb498132ed0c7d942f233f365b86ba37770e026510659"}, + {file = "starlette-0.48.0.tar.gz", hash = "sha256:7e8cee469a8ab2352911528110ce9088fdc6a37d9876926e73da7ce4aa4c7a46"}, ] [package.dependencies] anyio = ">=3.6.2,<5" +typing-extensions = {version = ">=4.10.0", markers = "python_version < \"3.13\""} [package.extras] full = ["httpx (>=0.27.0,<0.29.0)", "itsdangerous", "jinja2", "python-multipart (>=0.0.18)", "pyyaml"] @@ -3452,4 +3453,4 @@ cffi = ["cffi (>=1.11)"] [metadata] lock-version = "2.1" python-versions = "^3.11" -content-hash = "b4ef581d6d4acb0f68b42534b885cef0b2934405fbb33d576a98f09f7e42ebb9" +content-hash = "2a52dff6343d872f1476586ead951839510a314cb002a60e5d4808f07dbfecb1" diff --git a/services/mcp-server/pyproject.toml b/services/mcp-server/pyproject.toml index 94798af2..4008319e 100644 --- a/services/mcp-server/pyproject.toml +++ b/services/mcp-server/pyproject.toml @@ -13,6 +13,7 @@ pydantic-settings = "^2.9.1" dependency-injector = "^4.46.0" python-dateutil = "^2.9.0.post0" jinja2 = "^3.1.6" +starlette = ">=0.47.2,<0.49.0" [tool.poetry.group.dev.dependencies] debugpy = "^1.8.1" diff --git a/services/rag-backend/poetry.lock b/services/rag-backend/poetry.lock index 10563590..2fea6ce4 100644 --- a/services/rag-backend/poetry.lock +++ b/services/rag-backend/poetry.lock @@ -1,4 +1,4 @@ -# This file is automatically @generated by Poetry 2.2.0 and should not be changed by hand. +# This file is automatically @generated by Poetry 2.1.3 and should not be changed by hand. [[package]] name = "aiohappyeyeballs" @@ -523,11 +523,11 @@ description = "Cross-platform colored terminal text." optional = false python-versions = "!=3.0.*,!=3.1.*,!=3.2.*,!=3.3.*,!=3.4.*,!=3.5.*,!=3.6.*,>=2.7" groups = ["main", "dev"] +markers = "platform_system == \"Windows\" or sys_platform == \"win32\"" files = [ {file = "colorama-0.4.6-py2.py3-none-any.whl", hash = "sha256:4f1d9991f5acc0ca119f9d443620b77f9d6b33703e51011c16baf57afb285fc6"}, {file = "colorama-0.4.6.tar.gz", hash = "sha256:08695f5cb7ed6e0531a20572697297273c47b8cae5a63ffc6d6ed5c201be6e44"}, ] -markers = {main = "platform_system == \"Windows\" or sys_platform == \"win32\"", dev = "sys_platform == \"win32\" or platform_system == \"Windows\""} [[package]] name = "coloredlogs" @@ -4248,6 +4248,7 @@ qdrant-client = "^1.14.2" rag-core-lib = {path = "../rag-core-lib", develop = true} ragas = "^0.3.0" requests-oauthlib = "^2.0.0" +starlette = ">=0.47.2,<0.49.0" uvicorn = "^0.35.0" [package.source]